AWS Security Engineer

AWS Security Engineer

PlanIT Group is seeking an AWS Security Engineer to support our Federal customer in the Washington, DC area. The ideal candidate will have 7+ years of cybersecurity experience, including at least 3+ years in cloud environments. Hands-on experience implementing and assessing NIST 800-53 controls in a federal cloud context.

Location: Remote

Start Date: 07/21/25

Duration: One year plus annual extensions

AWS Security Engineer responsibilities include:

• Design and implement security controls in AWS environments using services such as IAM, KMS, CloudTrail, Security Hub and Config.
• Lead or support security authorization efforts (FedRAMP, FISMA) by preparing and maintain System Security Plans (SSPs), POA&Ms, Contingency Plans, and other artifacts.
• Conduct vulnerability scans, security assessments, and risk analyses using tools like Nessus or AWS Security Hub.
• Serve as the security POC and collaborate with stakeholders to ensure systems remain compliant with NIST 800-53 and agency specific policies.
• Monitor cloud environments for anomalous activity, enforce access control policies, and support incident response efforts.
• Review and advise on DevSecOps practices, including secure CI/CD pipelines, automate compliance checks, and secure container usage.
• Coordinate with the AO, ISSM, and SOC teams to manage system risk posture and track remediation activities.
• 7+ years of cybersecurity experience, including at least 3+ years in cloud environments.
• Hands-on experience implementing and assessing NIST 800-53 controls in a federal cloud context.
• Experience with cloud-native logging, monitoring, and SIEM integration.
• Experience with performing ISSO responsibilities within federal government programs.
• Strong scripting experience in Python, Bash, or PowerShell.
• Strong experience with DevOps tools such as Jenkins or CodePipeline.
• Proficiency with Linux/Windows server environment and cloud networking concepts (e.g., DNS, VPC, VPN, etc.)
• Familiarity/experience with artificial intelligence (AI) cloud tooling is a huge plus (e.g., Amazon BedRock, Lex, Comprehend, etc.)

Additional provisions include:

• Must be able to obtain a Public Trust Clearance
• Pass both a client mandated clearance process to include drug screening, criminal history check and credit check.
• All candidates must be a US Citizen or US Permanent Resident.
• Candidate must have lived in the United States for the past 5 years.
• Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)